Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/Uujg1vWtTBGDxRtQ_w_FZAdYVvw.roa
File: Uujg1vWtTBGDxRtQ_w_FZAdYVvw.roa (raw, json)
Hash identifier: bSaEVpBrBTluPKrKtZFObM4ahdqClvbYJomIJxU1WuI=
Subject key identifier: 52:E8:E0:D6:F5:AD:4C:11:83:C5:1B:50:FF:0F:C5:64:07:58:56:FC
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 018CC794C947E919AFEBA092F421B1533CBF
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/Uujg1vWtTBGDxRtQ_w_FZAdYVvw.roa
Signing time: Tue 02 Jan 2024 00:31:05 +0000
ROA not before: Tue 02 Jan 2024 00:31:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5089
IP address blocks: 45.43.168.0/22 maxlen: 22
104.239.122.0/23 maxlen: 23
104.239.120.0/23 maxlen: 23
104.239.70.0/23 maxlen: 23
104.239.68.0/23 maxlen: 23
64.137.0.0/22 maxlen: 22
64.137.4.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 29 Apr 2024 05:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:c9:47:e9:19:af:eb:a0:92:f4:21:b1:53:3c:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Jan 2 00:31:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=52e8e0d6f5ad4c1183c51b50ff0fc564075856fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:98:d9:0a:ad:0b:0a:13:c3:e1:28:80:09:25:
8f:ad:71:97:ad:d2:74:75:80:25:74:99:ab:d8:a3:
9b:fa:86:10:3e:4f:f2:a2:43:79:63:c3:39:4f:79:
00:16:65:7e:bd:aa:82:88:36:dc:db:01:03:17:bd:
bf:26:8f:6c:ea:d1:8e:0e:0f:11:bb:7e:52:4b:cc:
34:4d:38:ff:3e:92:4a:73:ea:16:8c:6a:f5:ed:9a:
f8:ff:ce:ff:90:38:6d:f2:7c:98:56:7c:0e:7d:4a:
09:d7:32:cb:a8:80:e6:0a:59:59:90:16:bc:54:24:
30:4f:d6:7f:5e:0e:0e:94:bd:1e:60:47:73:aa:ba:
2b:91:ae:0b:9e:5d:70:cf:cc:23:6a:ec:49:17:16:
08:f3:10:d7:78:3c:04:54:66:a6:1f:49:2c:7f:9b:
cf:1b:8a:38:ee:a3:d7:e1:c3:ee:0e:85:d8:b7:3d:
30:cc:8d:d6:4d:47:04:78:d5:17:a5:8b:af:da:3e:
0b:cc:04:76:1e:43:a2:02:ee:04:f6:61:8a:a6:8c:
f6:df:41:1f:6e:71:10:5a:c6:5f:35:52:9b:c4:16:
3c:82:44:cb:2d:5c:ba:f7:61:10:44:d4:86:5d:ed:
8b:3d:07:e0:af:44:e0:a8:55:8f:85:28:94:1a:e3:
bf:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:E8:E0:D6:F5:AD:4C:11:83:C5:1B:50:FF:0F:C5:64:07:58:56:FC
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/Uujg1vWtTBGDxRtQ_w_FZAdYVvw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.43.168.0/22
64.137.0.0/21
104.239.68.0/22
104.239.120.0/22
Signature Algorithm: sha256WithRSAEncryption
68:97:11:87:eb:37:ac:4f:d6:b5:e2:df:14:29:da:14:5b:2a:
4f:95:99:10:57:3e:f5:1a:85:71:f0:51:81:76:69:4b:6e:34:
bf:d3:79:66:8c:ff:70:f5:ee:76:f8:fa:a9:55:9b:ff:e4:13:
cb:37:99:e3:1a:ac:4d:36:06:de:d6:51:d0:8b:03:0c:44:75:
47:b9:d4:8f:79:52:af:36:3e:a9:7a:ca:82:2a:14:bc:57:5a:
3c:3e:99:05:11:10:ff:49:1a:80:cd:21:c0:d0:18:51:b0:5b:
d5:d0:5d:ff:82:30:20:84:7e:cb:e4:6b:9d:72:66:fc:45:fd:
92:c5:ce:52:6f:3c:c1:4f:42:33:d1:1e:5e:fc:3b:32:1c:99:
fa:fb:53:30:c3:6e:01:5a:8f:a8:3d:a0:bd:b5:6d:7f:56:90:
f7:d5:7f:69:d3:94:6b:4b:51:4e:2f:14:82:b3:fe:85:7a:91:
25:a1:6b:59:24:e5:4e:d9:fc:51:c1:3e:86:bb:05:a6:2f:27:
0d:ac:0d:a7:5a:1b:a8:f2:6c:f8:dd:57:97:34:31:2f:5b:87:
d6:9d:17:18:eb:02:b7:9c:d9:db:f3:c3:c3:aa:ef:2b:8d:1f:
46:29:7d:16:e2:12:db:30:a5:18:2d:8e:34:ca:53:84:55:08:
07:67:fb:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 10:22:37 2024 by rpki-client on console-ams.rpki-client.org